Skip to content

Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls

High severity GitHub Reviewed Published May 10, 2026 in open-webui/open-webui • Updated May 15, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts